Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/cQz5u5Gjc1iB7djWamKMmbrvXtc.roa
File:                     cQz5u5Gjc1iB7djWamKMmbrvXtc.roa (raw, json)
Hash identifier:          gkkrExgloEB7SHSdoKE4SRbURfhqAWb/ne0IcLZ0jDU=
Subject key identifier:   71:0C:F9:BB:91:A3:73:58:81:ED:D8:D6:6A:62:8C:99:BA:EF:5E:D7
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       31
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/cQz5u5Gjc1iB7djWamKMmbrvXtc.roa
Signing time:             Sat 01 Jul 2023 01:28:44 +0000
ROA not before:           Sat 01 Jul 2023 01:28:44 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     14618
IP address blocks:        150.70.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: Jul  1 01:28:44 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=710CF9BB91A3735881EDD8D66A628C99BAEF5ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:85:d4:89:75:4a:ac:a5:fa:cf:61:61:a0:
                    65:6e:38:cd:23:78:fe:b9:44:86:c7:e3:15:d4:df:
                    a4:4c:ff:9c:d5:24:85:e5:c6:d0:19:79:ec:cc:72:
                    09:a4:28:2a:89:7e:04:e6:45:cf:60:47:6e:9e:39:
                    23:93:68:db:b6:08:e9:2c:4c:4a:5e:d8:16:63:69:
                    ff:b9:fa:3d:36:29:5c:5a:ea:2e:b7:71:b0:c6:ab:
                    dc:d0:07:fd:88:1e:54:3f:8b:13:30:61:fa:8b:16:
                    b7:6b:6a:18:ca:ac:fc:8a:4c:14:87:97:30:56:7f:
                    5b:d6:1e:72:19:ad:22:dd:9b:2d:3f:d0:c2:48:ef:
                    09:a5:ab:cb:fb:7d:39:c9:f5:c6:74:f8:3d:50:12:
                    f0:b3:ca:bf:84:1c:2e:2b:b3:42:94:d6:34:e5:87:
                    99:cc:44:87:dc:b3:9d:2c:fa:98:04:2e:b3:14:8c:
                    dd:b9:ed:d0:ad:2f:e7:9f:e5:93:2a:31:1b:2a:e3:
                    f3:40:f9:20:b0:e5:db:f8:00:31:4d:e0:1a:e8:e5:
                    ea:ee:a1:32:02:b6:d1:9e:8f:45:d0:2a:43:b1:89:
                    00:57:c7:5b:06:af:0b:35:4f:50:08:1e:2a:ce:65:
                    5c:3b:62:69:74:eb:8e:8c:cf:e8:cb:92:26:a0:f1:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0C:F9:BB:91:A3:73:58:81:ED:D8:D6:6A:62:8C:99:BA:EF:5E:D7
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/cQz5u5Gjc1iB7djWamKMmbrvXtc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:32:e5:f8:50:3c:b8:1a:2d:07:6c:c3:71:dd:18:97:fa:f1:
         ef:ee:e8:de:fc:e3:b1:26:7d:6b:f1:43:ac:9b:37:95:f9:fb:
         3a:73:67:95:00:70:3b:2d:28:51:ca:21:e9:90:5a:77:f1:23:
         95:54:0f:fb:14:fa:fc:e8:78:3c:a7:dd:df:3d:19:cc:43:20:
         ac:6c:79:ec:02:e4:9f:82:a3:f6:b2:9c:71:cc:10:b6:34:04:
         44:b8:be:aa:8b:ac:8f:e1:71:e3:ef:ad:95:79:60:68:26:f9:
         c0:00:db:a7:7f:4a:29:6e:02:97:2f:2e:4a:71:85:3a:7f:3f:
         55:32:78:ac:b0:ce:3c:9d:08:e5:db:d0:26:50:f1:ab:82:c2:
         17:fd:19:11:11:fd:9f:75:4f:db:f7:41:a9:36:87:90:b4:f8:
         f2:8f:ba:5f:10:5a:0e:44:25:f2:26:0e:c6:a1:34:56:9d:57:
         9c:fa:5f:92:92:c5:82:24:d2:e9:e6:52:dc:81:60:72:c6:b7:
         c4:98:4d:e3:65:c8:4f:13:14:77:c5:2f:f5:af:3d:c2:0b:00:
         68:1f:c9:4c:76:5f:48:2f:35:26:3d:3d:b0:6a:cc:3a:03:2c:
         bf:16:f0:e4:a7:16:13:97:da:21:0f:3b:6c:32:23:52:f0:3a:
         84:d7:36:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0FD
NDc0RjY4MzNFNEEwMUE4NkIyM0I1MUU1NkE2NjFDRjJFMUY0MB4XDTIzMDcwMTAx
Mjg0NFoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoNzEwQ0Y5QkI5MUEzNzM1
ODgxRUREOEQ2NkE2MjhDOTlCQUVGNUVENzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ1NhdSJdUqspfrPYWGgZW44zSN4/rlEhsfjFdTfpEz/nNUkheXG
0Bl57MxyCaQoKol+BOZFz2BHbp45I5No27YI6SxMSl7YFmNp/7n6PTYpXFrqLrdx
sMar3NAH/YgeVD+LEzBh+osWt2tqGMqs/IpMFIeXMFZ/W9YechmtIt2bLT/Qwkjv
CaWry/t9Ocn1xnT4PVAS8LPKv4QcLiuzQpTWNOWHmcxEh9yznSz6mAQusxSM3bnt
0K0v55/lkyoxGyrj80D5ILDl2/gAMU3gGujl6u6hMgK20Z6PRdAqQ7GJAFfHWwav
CzVPUAgeKs5lXDtiaXTrjozP6MuSJqDxeh0CAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBRxDPm7kaNzWIHt2NZqYoyZuu9e1zAfBgNVHSMEGDAWgBSHrEdPaDPkoBqGsjtR
5WpmHPLh9DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTM4NC9oNnhIVDJnejVLQWFockk3VWVWcVpoenk0ZlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oNnhIVDJnejVLQWFockk3VWVWcVpo
enk0ZlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTM4NC9jUXo1dTVHamMxaUI3ZGpXYW1LTW1icnZYdGMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAlkbaMA0GCSqGSIb3DQEBCwUAA4IBAQBHMuX4UDy4Gi0HbMNx3RiX+vHv
7uje/OOxJn1r8UOsmzeV+fs6c2eVAHA7LShRyiHpkFp38SOVVA/7FPr86Hg8p93f
PRnMQyCsbHnsAuSfgqP2spxxzBC2NAREuL6qi6yP4XHj762VeWBoJvnAANunf0op
bgKXLy5KcYU6fz9VMnissM48nQjl29AmUPGrgsIX/RkREf2fdU/b90GpNoeQtPjy
j7pfEFoORCXyJg7GoTRWnVec+l+SksWCJNLp5lLcgWByxrfEmE3jZchPExR3xS/1
rz3CCwBoH8lMdl9ILzUmPT2wasw6Ayy/FvDkpxYTl9ohDztsMiNS8DqE1za/
-----END CERTIFICATE-----
Generated at Thu May 2 12:22:38 2024 by rpki-client on console-ams.rpki-client.org